CVE-2026-72959
HighCVSS 8.8Summary
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
Risk Assessment
A remote attacker could gain full access to the system without authentication, posing a serious threat to data confidentiality and integrity.
Recommendation
Immediately apply security patches for RRAS and restrict access to remote services.
Other vulnerabilities in Windows Routing and Remote Access Service
See all- CVE-2026-70570High
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine.
- CVE-2026-69852High
A Remote Code Execution vulnerability in Windows Routing and Remote Access Service (RRAS) allows an attacker to gain unauthorized access to the victim's machine.
- CVE-2026-57096High
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine